$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json) Hash identifier: 611boEKy6/degaQO2Pu2hVSj9L/CYy5Vz6mDaYT+wY4= Subject key identifier: 64:D9:4E:CA:6F:B3:3C:01:D1:83:24:B6:57:4A:68:EB:DD:00:DC:CE Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft Manifest number: 021C Signing time: Fri 25 Sep 2026 03:01:33 +0000 Manifest this update: Fri 25 Sep 2026 03:01:32 +0000 Manifest next update: Fri 02 Oct 2026 03:01:32 +0000 Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: VJey/WOIgQr3m6KOTZt6UFGtJgAIPc1Vr5WMz2HhmDk=) 2: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: ySADP91L9zzRBTSfDoHJ50+Ik7XzeYcUmFcCyfVbDoY=) 3: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: 4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Validity Not Before: Sep 25 03:01:32 2026 GMT Not After : Oct 2 03:01:32 2026 GMT Subject: CN=6ab5e40d-2f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:d1:76:ea:d0:e4:ca:8e:48:37:27:00:17: ba:25:64:90:28:bc:01:06:be:4a:d6:d4:75:9c:fa: cc:19:79:5d:ce:21:29:be:53:be:47:de:d9:65:82: 09:c5:a4:57:20:ab:13:1f:db:00:bd:54:a2:bb:a5: a6:4c:a5:5d:b4:1f:69:4d:cf:0e:42:0b:18:41:bf: ee:1a:c3:9c:02:dd:b6:93:08:b1:70:3c:de:f0:fc: f9:b3:a3:ce:5d:6e:ec:12:cf:ee:ba:40:d5:36:35: 97:57:23:c2:58:6c:35:53:ca:60:1d:8b:d2:ff:28: f2:25:b3:b0:ef:aa:30:b9:fd:ff:e4:ab:39:eb:78: 95:9e:bf:4a:7a:b2:64:19:6c:ab:55:d3:d2:1c:30: 01:d3:b3:95:a7:10:2e:12:12:f9:75:16:0d:8f:e2: 41:d9:9f:06:b4:7f:84:7b:88:46:db:b0:e6:bd:65: 17:ac:d3:40:7e:2e:5e:34:73:80:0b:36:43:1a:fb: 67:31:17:78:8c:d6:ef:e0:df:b2:07:c1:6d:09:de: 11:76:d3:f9:f1:a9:29:28:89:45:68:82:fc:97:98: b0:de:53:d4:c4:72:3c:63:9b:d1:51:03:0d:a4:e0: 26:31:d0:d0:03:34:cd:cf:58:61:eb:69:94:34:4f: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D9:4E:CA:6F:B3:3C:01:D1:83:24:B6:57:4A:68:EB:DD:00:DC:CE X509v3 Authority Key Identifier: keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:90:ce:fa:d4:5c:dd:ee:6d:85:81:2c:04:9e:d2:da:fc:b3: 5f:3c:48:a2:29:5b:53:90:8b:0d:ad:4d:5f:8c:50:36:80:41: 34:2e:e7:fc:80:bb:30:1a:ec:08:85:da:ee:ab:53:90:92:35: 0f:03:f8:65:dc:8e:06:bd:de:17:f0:94:72:d0:69:82:66:83: 48:06:be:f7:e2:c2:4a:f1:ce:7f:8c:24:40:a4:45:cb:2c:0a: 8d:d3:41:74:3d:ae:d7:91:04:b7:11:dc:e6:1a:f8:f9:bb:77: c6:f6:c6:a2:0b:18:53:35:66:b0:d6:01:5a:04:36:3e:d6:f4: 6a:07:c9:df:97:b7:5a:d4:7e:40:2d:47:d9:c2:24:70:2b:5e: d1:fe:48:6f:67:a8:99:bc:c4:a3:38:50:59:a8:ae:2f:25:5a: 3d:34:29:5a:db:fc:58:28:58:ff:ac:af:3c:98:00:ff:1d:d7: fa:32:38:c3:1f:27:04:30:83:25:b2:9b:76:c9:cf:49:80:b6: b2:8f:46:47:98:ba:bd:50:98:3c:2d:67:e2:5b:2c:e1:e5:5f: 54:92:aa:5a:0b:84:cf:70:38:db:d2:31:34:f8:46:08:7f:d0: 4f:ef:bb:c9:41:86:ab:3e:b9:d0:94:31:19:19:46:cb:64:b0: dc:16:e5:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjgxMTAvBgNVBAUTKEFGRkNFNjM3OTg4MTY1RTZDNTFCRkJGRUJEMTI4M0Q1 MTEyNDAxOTAwHhcNMjYwOTI1MDMwMTMyWhcNMjYxMDAyMDMwMTMyWjAYMRYwFAYD VQQDEw02YWI1ZTQwZC0yZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhsfRdurQ5MqOSDcnABe6JWSQKLwBBr5K1tR1nPrMGXldziEpvlO+R97ZZYIJ xaRXIKsTH9sAvVSiu6WmTKVdtB9pTc8OQgsYQb/uGsOcAt22kwixcDze8Pz5s6PO XW7sEs/uukDVNjWXVyPCWGw1U8pgHYvS/yjyJbOw76owuf3/5Ks563iVnr9KerJk GWyrVdPSHDAB07OVpxAuEhL5dRYNj+JB2Z8GtH+Ee4hG27DmvWUXrNNAfi5eNHOA CzZDGvtnMRd4jNbv4N+yB8FtCd4RdtP58akpKIlFaIL8l5iw3lPUxHI8Y5vRUQMN pOAmMdDQAzTNz1hh62mUNE+NtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTZTspv szwB0YMktldKaOvdANzOMB8GA1UdIwQYMBaAFK/85jeYgWXmxRv7/r0Sg9URJAGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2OC84Mjc1MjRFODhF RTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlplYkZHX3YtdlJLRDFSRWtB WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0FaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlpl YkZHX3YtdlJLRDFSRWtBWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR5DO+tRc3e5thYEsBJ7S2vyzXzxIoilbU5CLDa1NX4xQNoBBNC7n/IC7MBrs CIXa7qtTkJI1DwP4ZdyOBr3eF/CUctBpgmaDSAa+9+LCSvHOf4wkQKRFyywKjdNB dD2u15EEtxHc5hr4+bt3xvbGogsYUzVmsNYBWgQ2Ptb0agfJ35e3WtR+QC1H2cIk cCte0f5Ib2eombzEozhQWaiuLyVaPTQpWtv8WChY/6yvPJgA/x3X+jI4wx8nBDCD JbKbdsnPSYC2so9GR5i6vVCYPC1n4lss4eVfVJKqWguEz3A429IxNPhGCH/QT++7 yUGGqz650JQxGRlGy2Sw3BblZQ== -----END CERTIFICATE-----Generated at Fri Sep 25 19:18:32 2026 by rpki-client